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Development strategy of NFC mobile payment services 


The HKMA adopts the following strategies in facilitating the development of 


NFC mobile payment services in Hong Kong: 


Support the development of innovative services 

Establish long-term development objectives 

Support a market-driven approach on infrastructure development 
Develop a set of common standards and guidelines 


Protect users through ongoing supervision of new payment services 





Support the development of innovative services 


NFC study commenced Study in progress 


= Aroused interest of the m Certain stakeholders 
market and the public in considered building 


NFC mobile payment their own NFC 
Services infrastructures 

= Planning of isolated m Increasing demand for a 
NFC projects in shared infrastructure 
progress platform 


= Announcements of two 
NFC mobile payment 
Services 
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Establish long-term development objectives 


The HKMA formulates four long-term development objectives to enable the 
public to benefit from the innovative services and at the same time to ensure 
safety and security : 

m Ability to download multiple payment services onto a single NFC-enabled 


phone 


m Payment service continuity despite switching from one mobile network 
operator to another operator 


m Payment service continuity despite changing one’s NFC-enabled phone 


m High level of security in line with international standards and relevant 


regulatory requirements 


Development Objective 1 


Ability to download multiple payment services onto a single NFC- 
enabled phone 





Development Objective 2 


Payment service continuity despite switching from one mobile 
network operator to another operator 
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Development Objective 3 


Payment service continuity despite changing one’s NFC-enabled 


phone 






New Phone 
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Existing Phone 
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Development Objective 4 


Compliance with international security and control requirements 
in order to prevent: 


= Unauthorised access or tampering of transaction data 
= Unauthorised usage or leakage of payment card information 


= Interruption or disruption of payment services and processing 
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Consultancy study on NFC mobile payment services Kad 


The HKMA appointed a consultant in Q3 2012 to conduct a study 
on the establishment of an interoperable NFC mobile payment 
infrastructure 


m Collected feedback from the local market 


m 19 stakeholders were interviewed, including banks, payment service 
providers, mobile network operators, card associations, merchant 
acquirers and handset manufacturers 


m Analysed the approach and development strategies adopted by other 
markets 


= Recommended the implementation strategy for Hong Kong 


Hong Kong possesses good market conditions for a ow 
market-driven approach 


m High acceptance of contactless payments — 85% of non-cash 
transactions are already contactless 


m High smartphone penetration rate — 90% of mobile phones 
shipped to Hong Kong in 2013 will be smartphones 


m Increasing availability of NFC-enabled phones in local 


market — over 40% of smartphones are expected to be NFC- 
enabled in 2013 
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Support a market-driven approach for infrastructure cs 
development 


m Shared infrastructures are being developed by certain card 


association to speed up launches of NFC service 


m The HKMA supports a market-driven approach for shared 


infrastructure development as it suits the Hong Kong market: 
m Services can be launched more quickly 


= More receptive to stakeholders 


m The HKMA will continue to monitor the market development to 


ensure accomplishment of the long-term development objectives 
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Different form factors of NFC devices in the market Os 


= Banks adopts different form factors of NFC devices when launching 
their mobile payment services 


= Shared infrastructures developed by the market participants are able 
to support various kinds of form factors of NFC devices 


Embedded form External device form Slotted form 





Chip embedded in the phone E.g iPhone sleeves E.g NFC SIM 
card 


= Compliance with the international security and control standards 
and requirements regardless of the form factors adopted 
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Market-driven Approach: First Stage 


Market focus: time to market through mainly one-to-one 
partnerships 
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Market-driven Approach: Second Stage 


Market focus: to maximise coverage of a broader customer base 
through interoperable infrastructures 
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Development of common standards and guidelines a 


m The HKMA appointed the consultant to develop a draft set of 
common standards and guidelines based on the international 


standards 


= The HKMA and Hong Kong Association of Banks will establish a 
working group to discuss and finalise the common standards and 


guidelines 


= The industry supports the proposed approach to attain an 
interoperable and sustainable environment for the development of 


NFC mobile payment services 
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Overview of Guidelines and Standards 


A. Technical standards 
m Follow the widely adopted industry and international standards to 
encourage interoperability among the NFC infrastructures, NFC handset 
devices and point-of-sale terminals 











Overview of guidelines and standards (continued) 


B. Operational guidelines 


m Operational guidelines include the relevant workflows and will offer the 
following benefits: 


Convenient to use Easy to change 
Service subscriptions m Mobile phone change 
Service activation 

Service termination m Mobile phone subscription 
Service renewal or change 

version upgrade 

Service lock = Mobile phone number 


Service unlock change 





Such workflows also focus on requirements of “know your customer’ (KYC), 
cardholder authentication and mobile PIN management 
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Example of a payment card application process 5 
Online card Cad Dati aes l 
application n oa aA Card activation 
automatically 
Bank A’s NFC Customer’s phone 
infrastructure = 
Bank A key 
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Overview of standards and guidelines (continued) SS 


C. Security measures 


User Concerns Possible Security Measures 


Mobile phone hacked and payment card | Sensitive information of the payment card 
information stolen resides in a tamper-proof NFC device that can 
not be accessed, modified or copied arbitrarily 


Mobile wallet accessed and read by A personal password can be configured to open 
others the mobile wallet 


Incorrect transaction amount User can check the transaction history through 
the phone 

Loss of phone In additional to report of lost phone, the payment 
card can be locked remotely 


Data transmission between the phone, Data transmission process is encrypted to protect 

reader and back-end systems being the confidentiality (Same level of security as the 

hacked transmission processes of existing payment 
cards) 





Example of a credit card payment transaction ay 
process 


Customer’s Phone 


© Authenticate the card and i Sz 
; : authorise the payment om 
(4) Pass payment information to pay Weg 





backend systems 
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Backend at N ‘ 
seen Enter PIN to 


activate the 
mobile wallet 
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Benefits of adopting common standards and guidelines 
= Enjoy multiple services on a single phone 


m Increase user confidence 


m Enhance user experience and reduce learning curve if similar operational 
workflows are adopted across different banks 


= Promote acceptance of NFC mobile payment services 
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Protect users through ongoing supervision 


To launch a new service 
m The HKMA requires banks to conduct the following procedures before launching 
a new service: 
= Communicate and discuss the plan with the HKMA; 


m Conduct an independent assessment and submit the assessment report for the 
HKMA’s review 


m Provide additional information at the request of the HKMA, if necessary 


On-going supervision 


= On-going compliance with relevant supervisory requirements by banks is necessary (e.g. 
internal control system, data protection, application security, etc) 


= The HKMA will ensure banks’ compliance with the supervisory requirements through on- 


site examinations and off-site reviews 
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Conclusion 


The HKMA continues to support the rapid development of the market: 


m Rapid change of the market landscape within 6 months from generally low 
market awareness to launching or preparing for launching of NFC mobile 
payment services by many banks 


m Proactively exploring different development strategies and planning of 
building shared infrastructure by the industry in order to accomplish the 


HKMA’s long-term development objectives 


m Through the establishment of an industry working group under HKAB to 
implement the common standards and guidelines by the second half of 2013 
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